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<54) Abstract Title 

Trusted computing environment 

<57> In a trusted computing environment 100, each computing device 112 to 118 holds a policy 
he degree to which it can trust the other devices in the environment 100. The po holes are updated by an 
assessor 1 10 which receives reports from trusted components 120 in the comput.ng devices 112 to 118 which 
identify the trustworthiness of the computing devices 112 to 118. 

In conteTa trusted device can be relied upon to work as intended and has not been tampered w.th or 
subverted to run malicious applications. 
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FIELD OF THE INVENTION 

The invention relates establishing and/or maintaining a trusted computing environment. A 
first computing device can be said to regard a second computing device as trustworthy if 
10 the first computing device can expect the second computing device to operate or behave in 
a known manner. 

BACKGROUND TO THE IN VENTld)t? - - 



15 In the present context, "trust" and "trusted" are used to mean that a device or service can be 
relied upon to work in an intended, described or expected manner, and has not been 
tampered with or subverted in order to run malicious applications. A specification for 
trusted computing has been developed by the Trusted Computing Platform Alliance and 
can be found at www.trustedpc.org . 

20 

A conventional trusted computing device comprises a tamper resistant tester which can test 
the device to ascertain if it is trustworthy. The outcome of the test can be used within the 
device or reported to another computing device attempting to communicate with it. An 
exemplary trusted component is described in the applicants co-pending International Patent 
25 Application Publication No. PCT/GB0O/OO528 entitled 'Trusted Computing Platform", the 
contents of which are incorporated by reference herein. If the outcome of the test is 
reported to another device, then that other device can use the report to determine a trust 
policy vis-a-vis the device offering the report, which controls its communication with the 
reporting device. 

30 

One disadvantage of a computing environment comprised of trusted computing devices of 
the kind mentioned above arises where a trusted computing device becomes compromised, 
e.g. by a virus. The trusted computing devices in die environment do not know if the other 
computing devices within the environment have been compromised unless they challenge 
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the other computing devices to verify that they have not been compromised. The 
challenge- verification process can consume undesirable amounts of time and/or processing 
resources. 

5 SUMMARY OF THE INVENTION 

An object of the invention is the amelioration of the aforementioned disadvantage. 

According to one aspect, the invention comprises a method of operating a trusted 
10 computing system, the method comprising providing an assessor to receive a report from, 
and pertaining to the trustworthiness of, a first computing device, and the assessor updating 
the trust policy of a second computing device in accordance with the report. 

According to another aspect, the invention comprises an assessor for controlling a trusted 
15 computing system, the assessor comprising a receiver for receiving a report from, and 
pertaining to the trustworthiness of, a first computing device, an updater for updating the 
trust policy of a second computing device in accordance with the report, and a transmitter 
for transmitting the updated policy to the second computing device. 

20 Hence, the invention can provide an efficient way of informing computing devices within 
an environment about the trustworthiness of other computing devices within the 
environment, so as to establish or maintain a trusted computing environment. In 
maintaining a trusted computing environment, the invention may enable a computing 
device to be sure of, and keep up to date with, the level of trustworthiness of other 

25 computing devices in the environment. 

In one embodiment, the report contains an assessment of the trustworthiness that has been 
prepared by the reporting computing device itself. In another embodiment, the report 
provides information about the reporting computing device that is sufficient to allow the 
30 assessor to assess the trustworthiness of the reporting computing device. Preferably, the 
reporting computing device comprises a trusted component which evaluates the 
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trustworthiness of the computing device and provides the report. The trusted component is 
preferably resistant to tampering and capable of applying a digital signature to the report to 
permit authentication of the report. The reporting computing device may be triggered to 
provide the report in response to a certain event or any one of a number of predetermined 
5 events. For example, the reporting computing device may be triggered to report by a 
request from an assessor for a trustworthiness report, or by being initialised or reset, or by 
the occurrence of an undesirable event (e.g. the computing device being compromised by a 
virus). 

10 The assessor may, subsequent to receiving a trustworthiness report, update the trust policies 
of more than one computing device, one of which may be the. computing device that 
provided the trustworthiness report. 

A computing device in the context of the invention may be, for example, a computer or a 
15 peripheral (such as a scanner or printer) or other device having some data processing 
ability. 

BRIEF DESCRIPTION OF THE FIGURES 

By way of example only, some embodiments of the invention will now be described by 
20 reference to the accompanying drawings in which: 

Figure 1 is a block diagram of a trusted computing environment; and 

Figure 2 is a block diagram of an assessor. 

25 

DETAILED DESCRIPTION OF THE Pi&FEi&EP EmmmjENT 
The trusted computing environment 100 of Figure 1 comprises an assessing computer 110, 
or "assessor", which acts as a service provider to the computing devices in the 
environment, 112, 114, 116 and 118. In practice, the environment may comprise a 
30 different number of computing devices. Each computing device has at least some capacity 
for processing data and therefore at least some capacity for becoming untrustworthy or 
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affecting the trustworthiness of other computing devices with which it communicates. In 
this embodiment, devices 1 12, 1 14 and 1 16 are networked computers and device 1 18 is a 
network printer serving devices 1 12, 1 14 and 1 16. 

5 Each of the computing devices 1 12 to 118 comprises a trusted component and a memory 
122 holding a policy. A policy allows a computing device to determine the level to which 
it trusts other computing devices sharing the environment. 

As an example, a policy within a computing device may list the surrounding computing 
10 devices and specify the degree to which each of them is to be trusted. In order to set the 
degree of trust, a policy may specify that a particular computing device is to be interacted 
with for all purposes, selected purposes or not at all. 

As a further example, a policy within a computing device may specify a list of components 
15 (either software or hardware) that are untrustecL If a computing device containing such a 
policy finds one or more of these components in another computing device, then it can 
determine accordingly the degree to which it trusts that other computing device. 

Each trusted component 120 is arranged, in a known manner, to assess the trustworthiness 
20 of the computing device with which it is associated, and to report its assessment to the 
assessor 110. The report may contain, for example, a decision made by the trusted 
component as to the trustworthiness of its host computing device, or the trusted component 
may simply audit its host so that the report lists the components of its host. Examples of 
trusted components, and the monitoring of components or processes of a host, are found in 
25 the applicants co-pending International Patent Applications as follows: Publication No. 
PCT/GB00/02004 entitled "Data Logging in Computing Platform" filed on 25 May 2000 
and Publication No. PCT/GB00/00495 entitled "Protection of the Configuration of 
Modules in Computing Apparatus", filed on 15 February 2000, the contents of which are 
incorporated by reference. . 
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The trusted component 120 can be arranged to be triggered to report by any of a number of 
events. For example, the report can be triggered by a request for a report received from the 
assessor 110, initialisation or resetting of the host computing device, or by some 
undesirable event (e.g. detection of the computing device being compromised by a known 
5 virus or the loading or addition of components unrecognised by the trusted component). 
Alternatively, the trusted component 120 can be arranged to make periodic reports to the 
assessor. 

To maintain security, the trusted component 120 and the memory 122 holding the policy 
10 are incorporated in the corresponding computing device in such a manner that the trusted 
component 120 can perform its assessments on the computing device and yet the 
computing device is unable to modify the operation of the trusted component or the content 
of the policy. The memory 122 is arranged to accept updates to the policy that are certified 
by containing the digital signature of the assessor 1 10. Similarly, the trusted component is 
15 arranged to certify its outgoing reports with a digital signature which the assessor 110 can 
verify. The memory 122 containing the policy may be integrated with the trusted 
component 120. 

As shown in Figure 2, the assessor 110 comprises a receiver 200, an updater 210, a 
20 transmitter 212 and a requestor 214. In response to being polled by the requestor 214, the 
receiver 200 receives the reports from the trusted components (which contain, for example, 
decisions on trustworthiness or component inventories), the updater 210 updates the 
computing devices* policies as necessary and the transmitter 212 disseminates the updated 
policies. Clearly it is desirable that the assessor 110 or at least relevant functions thereof 
25 are also trusted. 

In the present embodiment, the assessor polls the trusted components within the computing 
devices 1 12 to 1 18 for trustworthiness reports. Consider the case where printer 1 18 has 
been contaminated by a virus. The report from this device alerts the assessor 1 10 to this 
30 fact and the assessor 110 responds by transmitting updated policies to the computing 
devices 1 12 to 1 1 8. The extent to which an updated policy curtails the extent to which the 
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computing device hosting the policy interacts with the affected device 1 18 depends on the 
relationship between the two computing devices. In this example, the policy of device 1 16 
is updated to reflect that it can only send urgent print requests to printer 118 and the 
policies of devices 1 12 and 1 14 are updated to reflect that they are not to interact with the 
5 printer 118 or, due the continuing potential for it to be compromised by printer 118, 
computing device 116. 

Due to the invention, a trusted computing network or environment can be established or 
maintained without a computing device being required to directly challenge the 
10 trustworthiness of another device when it is required to communicate with that device. 
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CLAIMS 

1. A method of operating a trusted computing system, the method comprising an 
5 assessor receiving a report from, and pertaining to the trustworthiness of, a first 

computing device, and the assessor updating the trust policy of a second computing 
device in accordance with the report. 

2. A method according to claim 1, wherein the assessor updates the trust policies of 
10 multiple computing devices in accordance with the report. 

3. A method according to claim 1 or 2, wherein the assessor updates policies by 
assessing the trustworthiness of the first computing device on the basis of information 
about the first computing device in the report. 

15 

4. A method according to claim 1 or 2, wherein the assessor updates policies on the 
basis of an assessment of the trustworthiness of the first computing device contained in 
the report. 

20 5. A method according to any one of claims 1 to 4, wherein the assessor requests the 

first computing device to make the report. 

6. A method according to any one of claims 1 to 4, wherein the first computing device 
is caused to report by being started-up or reset, or by an undesirable event occurring. 

25 

7. A method according to any one of claims 1 to 4, wherein the first computing device 
is caused to report periodically. 
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8. An assessor for controlling a trusted computing system, the assessor comprising a 
receiver for receiving a report from, and pertaining to the trustworthiness of, a first 
computing device, an updater for updating the trust policy of a second computing 
device in accordance with the report, and a transmitter for transmitting the updated 

5 policy to the second computing device. 

9. An assessor according to claim 8, wherein the updater is arranged to update the 
trust policies of multiple computing devices in accordance with the report and the 
transmitter is arranged to transmit the updated policies to the multiple computing 

10 devices. 

10. An assessor according to claim 8 or 9, wherein the updater updates policies by 
assessing the trustworthiness of the first computing device on the basis of information 
about the first computing device in the report. 

15 

1 1 . An assessor according to claim 8 or 9, wherein the updater updates policies on the 
basis of an assessment of the trustworthiness of the first computing device contained in 
the report. 

20 12. An assessor according to any one of claims 8 to 1 1 further comprising a requestor, 

for requesting the report from the first computing device. 

13. A system comprising an assessor for controlling a trusted computing system, the 
assessor comprising a receiver for receiving a report from, and pertaining to the 

25 trustworthiness of, a first computing device, an updater for updating the trust policy of 

a second computing device in accordance with the report, and a transmitter for 
transmitting the updated policy to the second computing device, and the system further 
comprising first and second computing devices, wherein at least the first computing 
device comprises a reporter for sending a trustworthiness report to the assessor and at 

30 least the second computing device comprises a memory maintaining a trust policy such 

that the trust policy is modifiable by the transmitter. 
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